The idea that this vulnerability has been used for mass data collection for advertising or surveillance purposes is absurd.
No it isn’t. It might be highly unlikely if it is as you say, but we passed absurd surveillance methods /levels a long time ago.
I certainly don’t have any reason to believe a surveillance avenue like this would be passed up because “they may get caught”.
